esp@ccnet document view 



Page 1 of ! 



STORAGE CONTROLLER 



Patent number: 
Publication date: 
Inventor: 

Applicant: 

Classification: 
- international: 



JP9330182 

1997-12-22 

MATOBA HIROZUMI; SATO TAKAO; FUKUOKA MIKIO; 
OGATA MIKITO 

HITACHI LTD 



G06F3/06; G06F3/06; G06F3/06; G06F12/16 

- european: 

Application number: JP1 99601 72986 19960612 
Priority number(s): 



Report a d.ita error here 



Abstract of JP9330182 

PROBLEM TO BE SOLVED: To minimize the 
cost needed to secure necessary reliability by 
preferentially using a stand-by disk drive for a 
disk drive wherein data of relatively high 
importance are stored and efficiently using the 
stand-by disk drive when the data are backed 
up against fault occurrence. 
SOLUTION: A table 35 in a common memory 
32 contains fault statistic information on disk 
drives 41-1-41-16. Further, a service 
processor 36 is controlled by an operator 
through a maintenance terminal 50 to set 
necessary information in a data arrangement 
information table 33 and a stand-by disk drive 
management table 34 in the common memory 
32. Then a stand-by disk drive selecting 
means 102 of a control part 31 preferentially 
uses the stand-by disk drive for the disk drive 
where data of relatively high importance are 
stored to efficiently use the stand-by disk drive 
when backing up the data while carrying on 
data transmission to and reception from a 
central processor 10 during fault occurrence in 
a disk drive. 
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* NOTICES * 



JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

LThis document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1] Control two or more independent disk drives, control transfer of the data between a 
central processing unit and said two or more disk drives, and at least one of said two or more 
disk drives is received. Make said data arrange and memorize and the control logic which 
processes the access request to said two or more disk drives from said central processing unit 
to compensate for said data arrangement is included. Recognize the failure generated in either of 
said two or more disk drives, and it recognizes whether it is the failure generated in which disk 
drive. It is the memory control unit which backs up the data memorized on the disk drive 
concerned, without interrupting transfer of said data to the reserve disk drive of said two or 
more disk drives. At least one of said two or more disk drives is held as a reserve disk drive. 
[ whether it considers as the common reserve disk drive used to every disk drive in the case of 
a backup process, and ] Or a means to set up beforehand the attribute whether to consider as 
the reserve disk drive of the dedication used only to one or more specific disk drives in the case 
of a backup process. The memory control unit characterized by having a selection means to 
choose one of said reserve disk drives as backup processes with reference to the contents of a 
setting of the attribute of each reserve disk drive of said in case a backup process is started. 
[Claim 2] In a memory control unit according to claim 1 said selection means In choosing one of 
said reserve disk drives to the disk drive which the failure generated What [ one or more ] is [ a 
thing intact among said common reserve disk drives ] intact among the reserve disk drives of 
dedication for the disk drive which those or more with one and said failure generated At a 
certain time The memory control unit characterized by choosing one of intact things among said 
common reserve disk drives. 

[Claim 3] The memory control unit characterized by having further a means to divide said data 
into two or more segments, to store each segment in a different disk drive among said two or 
more disk drives in a memory control unit according to claim 1 or 2, to arrange data, and to 
process the access request to said store from said central processing unit to compensate for 
said data arrangement. 

[Claim 4] The memory control unit characterized by having further a means to divide said data 
into two or more segments, to create redundancy data further in a memory control unit 
according to claim 1 or 2 based on them, to store said segment and redundancy data in a 
different disk drive among said two or more disk drives, to arrange data, and to process the 
access request to said store from said central processing unit to compensate for said data 
arrangement. 

[Claim 5] In a memory control unit according to claim 4, a failure occurs in one set of the disk 
drive of two or more disk drives which stored said each segment and redundancy data. When 
carrying out the backup process to the disk drive which this failure generated. The memory 
control unit characterized by having further a means to perform a backup process by 
reconfigurating the data stored on the disk drive which the failure generated using the data 
stored in disk drives other than the disk drive which the failure generated. 
[Claim 6] The memory control unit characterized by having further the means which changes 
whether the backup process by whether extent of the failure of the disk drive which the failure 
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generated performs the backup process which depends on reconstruction of the aforementioned 
data in said backup process in a memory control unit according to claim 5, and copying the data 
stored on the disk drive which said failure generated simply is performed. 



[Translation done.] 
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* NOTICES * 

JPO and NCI PI are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2. **** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 

DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
- [0001] 

[Field of the Invention] In the memory control unit with which this invention processes the disk 
drive group of a redundant configuration especially about a storage control technique Continuing 
transfer of data with a central processing unit, when a defect or a temporary failure occurs in a 
disk drive The equipment which maintains high dependability by starting automatically the backup 
process which used the spare disk drive about the data and redundancy data on the disk drive 
which the failure generated, Or it sets to the memory control unit which processes an un- 
redundancy disk drive group. Continuing transfer of data with a central processing unit, when the 
accumulating totals of a failure temporary about each disk drive exceed a threshold By starting 
automatically the backup process which used the spare disk drive about the data on the disk 
drive with which the accumulating totals of the failure exceeded the threshold, it applies to the 
equipment which maintains high dependability, and is related with an effective technique. 
[0002] 

[Description of the Prior Art] For the purpose of securing the data integrity accumulated in the 
field of information processing The dependability of stored data is raised by storing, where the 
redundancy of data is raised to an independent disk drive physically [ plurality ]. The disk drive 
group which detects it when a defect occurs in a disk drive, and is mutually associated logically 
about generation and storing of redundancy data, Namely, reconfigurate the data on the disk 
drive concerned using the data and redundancy data which are on the disk drive of others other 
than the disk drive concerned among redundancy groups, and a backup process is automatically 
started to a spare disk drive. On the other hand, when the data with which the access request 
from a central processing unit is arranged on the failure disk drive are received, the approach of 
reconfiguring the data concerned using redundancy data and answering a central processing 
unit is indicated by Patent Publication Heisei No. 504431 [ 05 to ]. Moreover, with an identical 
text document, about a reserve disk drive, fix beforehand as an object for backup of a specific 
redundancy group, and each reserve disk drive is not set up. By considering as the common 
reserve disk pool used as every object for redundancy groups It supposes that there is no futility 
to the last one of a reserve disk drive at the time of the need, and it is usable, and the approach 
of pressing down low is indicated [ cost / presser-foot ] few in the number of reserve disk 
drives taken to secure required dependability. 
[0003] 

[Problem(s) to be Solved by the Invention] In the above-mentioned conventional technique, 
when two or more groups actuation of the redundancy group which consists of two or more disk 
drives is carried out, continuing transfer of data with a central processing unit, a failure occurs in 
the midst to which the backup process is automatically performed about a certain redundancy 
group, or one of the disk drives in redundancy group another after the processing is completed, 
and there may be the situation where a backup process is needed. When the approach of a 
reserve disk pool is used at this time, one intact thing is automatically selected in all reserve 
disk drives, and a backup process is started. That is, the reserve disk drive will be consumed by 
the backup process started automatically sequentially from the redundancy group which the 
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failure generated. Therefore, there may be the situation where the reserve disk drive equipped 
when the approach of a reserve disk pool is used will be consumed altogether in the inside of a 
short time. 

[0004] Differentiation which depends on the redundancy group which becomes each backup 
origin in the case of this backup process is not performed. That is, differentiation according to 
whether data with a low significance are stored relatively or important data are stored relatively, 
such as data temporary in the redundancy group of a backing up agency, is not performed about 
use of a reserve disk drive. For this reason, for the backup process of the disk drive with which 
data with a low significance were stored relatively After using the reserve disk drive of the last 
which was intact and remained all over the reserve disk pool, When a failure occurs by the 
redundancy group in which data with a high significance were stored relatively and a backup 
process is needed A backup process cannot be automatically started about the redundancy 
group. It is extended until it succeeds in exchange of the failure disk drive by the customer 
engineer, or extension of a reserve disk drive. Moreover, although there is a problem that must 
continue actuation with an un-redundancy configuration and data integrity with a high 
significance falls relatively as a result in order to continue transfer of data with a central 
processing unit also while the backup process will be carried out to extension Consideration 
about this point is not carried out. 

[0005] [ when it is possible for a user or a customer engineer to decide beforehand in which 
redundancy group data with a high significance are generally relatively stored among the data 
stored, and to employ it ] Those who used the reserve disk drive for backup preferentially to the 
redundancy group in which important data are stored relatively can make data integrity higher 
efficiently to a fixed number of numbers of reserve disk drives. However, when a reserve disk 
drive is beforehand assigned fixed altogether to each redundancy group, efficient use of a 
reserve disk drive becomes impossible. 

[0006] Therefore, it becomes the technical problem of this invention to realize coexistence of 
pressing down low the cost required in order to secure required dependability to assign a reserve 
disk drive preferentially to the redundancy group in which the data with which a user judges a 
backup process that significance is high relatively in the equipment started automatically were 
stored, and by using the given reserve disk drive efficiently. 
[0007] 

•[Means for Solving the Problem] In order to solve the above-mentioned technical problem, this 
invention controls two or more independent disk drives. A central processing unit, Control 
transfer of the data between said two or more disk drives, and at least one of said two or more 
disk drives is received. Make said data arrange and memorize and the control logic which 
processes the access request to said two or more disk drives from said central processing unit 
to compensate for said data arrangement is included. Recognize the failure generated in either of 
said two or more disk drives, and it recognizes whether it is the failure generated in which disk 
drive. It is the memory control unit which backs up the data memorized on the disk drive 
concerned, without interrupting transfer of said data to the reserve disk drive of said two or 
more disk drives. At least one of said two or more disk drives is held as a reserve disk drive. 
[ whether it considers as the common reserve disk drive used to every disk drive in the case of 
a backup process, and ] Or a means to set up beforehand the attribute whether to consider as 
the reserve disk drive of the dedication used only to one or more specific disk drives in the case 
of a backup process, In case a backup process is started, he is trying to have a selection means 
to choose one of said reserve disk drives as backup processes with reference to the contents of 
a setting of the attribute of each reserve disk drive of said. 

[0008] Moreover, are in charge of said selection means choosing one of said reserve disk drives 
to the disk drive which the failure generated. What [ one or more ] is [ a thing intact among said 
common reserve disk drives ] intact among the reserve disk drives of dedication for the disk 
drive which those or more with one and said failure generated At a certain time He is trying to 
choose one of intact things among said common reserve disk drives. 

[0009] Moreover, said data are divided into two or more segments, and each segment is stored in 
a different disk drive among said two or more disk drives, and he arranges data, and is trying to 
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have further a means to process the access request to said store from said central processing 
unit to compensate for said data arrangement. 

[0010] Moreover, said data are divided into two or more segments, and redundancy data are 
further created based on them, and said segment and redundancy data are stored in a different 
disk drive among said two or more disk drives, and he arranges data, and is trying to have further 
a means to process the access request to said store from said central processing unit to 
compensate for said data arrangement. 

[0011] Furthermore, when carrying out the backup process to the disk drive which the failure 
generated in one set of the disk drive of two or more disk drives which stored said each segment 
and redundancy data, and this failure generated, he is trying to have further a means perform a 
backup process, by reconfigurating the data stored on the disk drive which the failure generated 
using the data stored in disk drives other than the disk drive which the failure generated. 
[0012] Furthermore, the memory control unit characterized by having further the means which 
changes whether the backup process by whether extent of the failure of the disk drive which the 
failure generated performs the backup process which depends on reconstruction of the 
aforementioned data in said backup process, and copying the data stored on the disk drive which 
said failure generated simply is performed. 
[0013] 

[Embodiment of the Invention] Hereafter, the gestalt of operation of this invention is explained to 
a detail, referring to a drawing. Drawingl is the outline block diagram of the configuration of the 
information processing system containing the disk subsystem which is the gestalt of 1 operation 
of this invention. It consists of a central processing unit 10 and a memory control unit 20 
containing the storage control section 30 and the storage section 40. A central processing unit 
10 and the storage control section 30 are combined through the information-transmission line 
60, and the storage control section 30 and the storage section 40 are combined by the 
information-transmission line 70-1 and the information-transmission line 70-2. In the store 
section 40. a disk drive 41-1 to 41-8 is connected to the control section 31 in the storage 
control section 30 by the information-transmission line 70-1. and the disk drive 41-9 to 41-16 is 
connected to the control section 31 in the storage control section 30 by the information- 
transmission line 70-2. The storage control section 30 consists of shared memories 32 with the 
control section 31 which controls transfer of the data between a central processing unit 10 and 
the store section 40, and a service processor 36. 

[0014] A shared memory 32 is referred to by a control section 31 and the service processor 36, 
and contains the reserve disk drive management information table 34, the data arrangement 
information table 33 for specifying arrangement of the data to the disk drive 41-1 to 41-16 in 
the store section 40 as a meaning, and the failure statistical information table 35. The statistical 
information about the failure of each disk drive 41-1 to 41-16 is stored in the failure statistical 
information table 35. A control section 31 includes the reserve disk drive selection means 102. 
[0015] A service processor 36 includes the reserve disk drive attribute setting means 101. A 
service processor 36 is controlled by the operator, i.e.. the user, or customer engineer which the 
exterior does not illustrate through a maintenance terminal 50, and sets up information required 
for the data arrangement information reserve disk drive management information table 33 and 34. 
Namely, the data arrangement information table 33 is received. A setup of the configuration of 
each redundancy group and a non-redundancy group, i.e., a setup of which to specify as the 
configuration disk drive of what position of which redundancy group and a non-redundancy group 
among disk drives 41-1 to 41-16, [ whether it is referred to as RAID 5 which consists of the 
arranging method, for example, six drives for data and one disk drive for parity, and ] It is 
referred to as RAID0 used as the disk drive group which set to RAID1 of one drive for data, and 
one disk drive for parity, or became independent by one set. or A setup about the classification 
of the method of arranging **. A setup of how many logical devices to assign in what kind of 
sequence, respectively is performed to each redundancy group and a non-redundancy group. As 
opposed to the reserve disk drive management information table 34 Similarly the reserve disk 
drive attribute setting means 101 is used through a maintenance terminal by the operator. 
[ which / of a disk drive 41-1 to 41-16 / is set as a reserve disk drive, and ] Moreover. 
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[ whether it considers as the common reserve disk drive which uses each reserve disk drive also 
to which redundancy group or a non-redundancy group, and ] Or it considers as the reserve disk 
drive of the dedication used only to a specific redundancy group or a specific non-redundancy 
group, or is set as dedication to which redundancy group or a non-redundancy group, 
respectively, or ** is set up. 

[0016] When there is read-out to a logical device from a central processing unit 10 or a write 
request, with the data arrangement information table 33, if a control section 31 is required, it will 
compute correspondence with the device access address, and each disk drive 41-1 to 41-16 in 
the store section 40 and the storage region within the disk drive using the reserve disk drive 
management information table 34, and a control section 31 controls each disk drive. The reserve 
disk drive management information table 34 is referred to because during a backup process and 
after processing will be able to access original not a disk drive but backup place disk drive. 
[0017] An operator becomes possible [ assigning a reserve disk drive preferentially to the data 
concerned at dedication allocation and by arranging important data from a central processing 
unit relatively to the logical device of this ** further ] about a reserve disk drive at the disk drive 
group containing at least one or more specific logical devices combining above-mentioned 
allocation of a logical device and reserve disk drive allocation. 

[0018] Generating of the error at the time of the control to each disk drive 41-1 to 41-16 and a 
report of a failure are sorted out and arranged by the control section 31, and are stored and 
updated by it by the failure statistical information table 35 in a shared memory 32. When a 
control section 31 judges that a backup process is required from statistical information at the 
time of updating, the reserve disk drive selection means 102 is used, one of reserve disk drives 
is chosen automatically, it is made into a backup place disk drive, and the backup process of the 
data on the disk drive which the failure generated is started automatically. 
[0019] As the approach of backup, it is in the approach by simple copy, or the approach of 
reconfigurating the data on a failure disk drive using redundancy, and writing in a backup place 
disk drive and In decision of initiation of this backup process, when it is judged that 

the accumulating totals of the failure of a specific class exceeded the threshold, before resulting 
in loss of data, backup to a reserve disk drive may be performed by the approach, i.e., the 
approach by simple copy, of not using redundancy preclusively. This approach is an approach 
effective in maintaining data integrity also in any in case there is no redundancy, when 
redundancy is in the disk drive group of this ** at that time. Moreover, in decision of initiation of 
a backup process, when it is judged that the accumulating totals of the failure of a specific class 
exceeded another threshold, and redundancy is in the disk drive group of this ** at the time, 
backup to a reserve disk drive may be performed by reconfigurating the data on the failure 
generating disk drive concerned using redundancy. 

[0020] In selection of a reserve disk drive, for the disk drive group which the failure generated, 
the reserve disk drive of dedication, When both common reserve disk drives have an intact 
reserve disk drive Any one may be chosen from from as a backup place disk drive among the 
reserve disk drives of common use or dedication. Moreover, give priority and one is chosen from 
from as a backup place disk drive among common reserve disk drives. You may make it choose 
one of the reserve disk drives of dedication as a backup place disk in the condition that the 
intact thing also of one was lost with the common reserve disk drive. 

[0021] Drawing 2 is the hard block diagram of the information processing system containing the 
disk subsystem which is the gestalt of 1 operation of this invention. The control section in the 
principle explanatory view of drawing 1 corresponds to the part containing a host adapter 231-1 
to 231-2, a disk adapter 233-1 to 233-4, cache memory 232-1 to 232-2, the data transfer bus 
237-1 to 237-2, and the storage control circles communication bus 236 in drawing 2 . The disk 
drive 242-1 to 242-64 of store circles is a SCSI disk drive. Although each disk adapter 233-1 to 
233-4 controls only a specific disk drive box among the disk drive boxes 241-1 to 241-2, the 
information-transmission line 270-1 to 270-16 which connects each disk drive and the disk 
adapter 233-1 to 233-4 in a control section is raising responsibility to the storage control 
section 230 while surely raising those with two line, and failure-proof nature. To the write 
request of the data from a central processing unit 210, it duplex-izes to two cache memory 232- 
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1 to 232-2, and buffers in it, and from the variable format which is the data format from a central 
processing unit 210, it changes into the fixed format for SCSI disk drives, and writes in a disk 
drive. Therefore, since data are surely accessed through a cache, they prevent loss of write 
request data by (96 hours), and duplex-izing data as mentioned above. [ data cache memory ] 
[ un-volatilizing ] The data transfer between central processing units 210 is raising the response 
engine performance while two or more information-transmission lines 260-1 to 260-8 are 
prepared and it raises failure-proof nature. The shared memory 234-1 to 234-2 is duplex-ized, 
and it prevents that data arrangement information memory etc. is lost The data transfer bus 
237-1 to 237-2 is duplex-ized, and is raising failure-proof nature and the response engine 
performance. A host adapter 231-1 to 231-2, a disk adapter 233-1 to 233-4. and ********** 
can operate to juxtaposition, and are raising the response engine performance. Thus, in control 
of the data between a central processing unit 210 and a disk drive 242-1 to 242-64, all of the 
information-transmission line 260-1 to 260-8, a host adapter 231-1 to 231-2, a disk adapter 
233-1 to 233-4, the data transfer bus 237-1 to 237-2, cache memory 232-1 to 232-2, the 
information-transmission line 270-1 - 270-16** are redundancy-ized. 

[0022] Drawing 4 shows the general-view Fig. of a memory control unit 220. They are **** of 
1.3m, the depth of about 0.8m, and magnitude with a height of about 1.8m. There are the two 
power-source input sections in equipment, and the resistance over the power failure in the 
outside of equipment is raised. The disk drive current supply unit section 420-1 which is at the 
bottom of front among the disk drive current supply unit sections 420-1 to 420-8 by the side of 
the store section 230 is shown in drawing 5 in more detail. This changes input power into a 
direct current, including a maximum of eight disk drives 242-1 to 242-8, two DC-power-supply 
feed zones 421-1 to 421-2 which supply a power source to each part are redundant 
configurations, respectively, and if either operates, a disk drive 242-1 to 242-8 can work. The 
disk drive box 241-1 of drawing 2 is constituted from the disk drive current supply unit section 

420- 1 to 420-4, and the disk drive box 241-2 consists of the disk drive current supply unit 
sections 420-5 to 420-8. 

[0023] Signs that it saw from signs that it saw from the front face of the storage control section 
220, and a rear face are shown in drawing 6 and drawing 7 . In drawing 7 , a host adapter 231-1 
to 231-2, a disk adapter 233-1 to 233-4, cache memory 232-1 to 232-2, and a shared memory 
234-1 to 234-2 are mounted in the Boolean part box. The DC-power-supply intensive box 322 
and two or more DC-power-supply feed zones 323-1 to 323-6 are two redundant configurations 
too, and are equipped with the breaker box 321-1 to 321-2 to each. The above duplex-izing and 
the inside of the part multiplexed, A shared memory 234-1 to 234-2, cache memory 232-1 to 
232-2, a host adapter 231-1 to 231-2, a disk adapter 233-1 to 233-4, a disk drive 242-1 to 242- 
64, the DC-power-supply feed zone 323-1 to 323-6 And each DC-power-supply feed zone in 

421- 1 - 421 -16 and the DC-power-supply intensive boxes 322 In addition to the maintenance 
at the time of failure generating, ****** of scheduled maintenance and a hard configuration is 
possible, being ****** and exchangeable in hot swapping, and continuing transfer of the data 
between central processing units. 

[0024] Next, some examples are shown and selection of the reserve disk drive at the time of 
processing and the backup process of the access request from a central processing unit 10 is 
explained in the principle explanatory view of drawing 1 . Drawing 8 shows an example of a logical 
setup of each disk drive in the store section 40. A disk drive 41-1 to 41-16 by initial setting by 
the operator Four reserve disk drives (disk drive 41-13 to 41-16) are set up. The remaining disk 
drives 41-1 to 41-12 It is logically divided into the disk drive group 90-1 to 90-4 which consists 
of a disk drive 41-1 to 41-3. 41-4 to 41-6, 41-7 to 41-9, and 41-10 to 41-12, respectively, the 
disk drive which can be mounted in this example — it all mounted and all they are set up as a 
disk drive which stores a reserve disk drive or data, and redundancy data. By each disk drive 
group, data and redundancy data are set as two disk drives and the redundancy disk drive group 
of RAID5 which consists of three disk drives which occupies one set in capacity, respectively. A 
disk drive 41-13 is set as 90 to disk drive group 1 dedication among reserve disk drives, and the 
disk drive 41-14 is set as 90 to disk drive group 2 dedication. Moreover, the disk drive 41-15 and 
the disk drive 41-16 are set up as a common reserve disk drive. 
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[0025] In a configuration like drawing 8 , the disk drive group 90-1 and 90-2 can perform the 
backup process to 3 times by max once [ at least ] in the viewpoint of allocation of a reserve 
disk drive. That is, if one set of a reserve disk drive is used once, use beyond it cannot be 
performed (however, failure recovery of the disk drive which the failure generated is performed, 
and when the data stored in the reserve disk drive are reverse-copied to the disk drive by which 
failure recovery was carried out, the reserve disk drive can be used again). Therefore, since a 
common reserve disk drive can be used a maximum of twice and the reserve disk drive of 
dedication can be used once, when two sets of common reserve disk drives are used by other 
disk drive groups, it is possible [ it is possible to perform the backup process to 3 times at 
convenience and max, and ] to perform at least one backup process. On the other hand, since 
the reserve disk drive of dedication is not set up, the disk drive group 90-3 and 90-4 cannot be 
performed once at the maximum, when backup process but another possible [ the backup 
process by the common reserve disk drive to 2 times ] has started in advance. 
[0026] The logical condition in a certain time in a setup like drawing 8 is shown in drawing 9 . 
Table 1 of drawing 12 shows some contents on the reserve disk drive management information 
table 34 at this time. Each item in Table 1 is the following semantics. A reserve disk drive 
location number is a number which shows the arrangement location of each disk drive in the 
store section 40 of a reserve disk drive. The exclusive attribute flag means having set it as the 
attribute used for dedication to a specific disk drive group in the case of a backup process, when 
it is ON. A busy condition expresses [ under simple backup, a backup settled, under the backup 
which used redundancy, and a reverse copy, and ] whether it is intact. A thing table is carried 
out, and when [ OFF and whose a busy condition an exclusive attribute flag is except an intact 
condition ] being set up so that it may be used for dedication to the disk drive group to which 
the disk drive group serial number points when an exclusive attribute flag is ON, a 
correspondence disk drive group serial number means whether it is using it to the disk drive 
group to which which disk drive group serial number points. In 01, 02 corresponds to the disk 
drive group 90-2, and 03 corresponds to the disk drive group 90-1 at the disk drive group 90-3. 
The relative position of a processing-object disk drive expresses the relative position in the disk 
drive group of the disk drive for a backup process. For example, 2 of the best column of Table 1 
corresponds to the disk drive 41-2 of the disk drive group 90-1. 

[0027] Drawing 3 shows the flow chart in case the reserve disk drive selection means 102 
chooses a reserve disk drive with reference to the reserve disk drive management information 
table 34. In drawing 9 , it is shown that the failure which needs a backup process for the disk 
drive to which x mark is attached has occurred, and the arrow head is pointing to the backup 
place disk drive. Suppose that it is the disk drive with obstacles with which the disk drive 41-12 
was most judged to be the backup process need in recently among the disk drives to which x 
mark is attached. In order that one may not have an intact thing in a common reserve disk drive 
at this time, the backup process of a disk drive 41-12 is not performed. That is, in the flow chart 
of drawing 3 , it becomes the flow of NO and step 1007 "it is to processing at the time of backup 
process improper" to NO and step 1004 "the reserve disk drive of dedication is set as the disk 
drive group concerned" to step 1001 "backup process demand generating" and step 1002 "there 
is an intact thing among the reserve disk drives which are not dedication." Therefore, access to 
a disk drive 41-12 is henceforth performed using the redundancy of a disk drive group. Moreover, 
henceforth, if the disk drive 41-14 which is the last intact reserve disk is not in either of the disk 
drives about either of the disk drives 41-4 to 41-6 which constitute the disk drive group 90-2 
which is set up as an exclusive reserve disk drive when the failure which needs a backup 
process occurs, a backup process will not be performed. When this backup process operates, it 
sets to the flow chart of drawing 3 . As opposed to step 1001 "backup process demand 
generating" and step 1002 "there is an intact thing among the reserve disk drives which are not 
dedication" NO, As opposed to step 1004 "the reserve disk drive of dedication is set as the disk 
drive group concerned" YES, It becomes the flow of YES, step 1006 "specify one for backup 
processes from the intact thing which is the reserve disk drive of dedication", and step 1008 
"backup process initiation" to step 1005 "there is an intact thing among the reserve disk drives 
of dedication." However, when extension of a reserve disk drive was performed by the customer 
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engineer, or when processing which the exchange or repair of a failure disk which finished the 
backup process is performed, and reverse-copies the contents of the backup place disk drive is 
performed, the backup process of any disk drive group can become again possible. 
[0028] D rawing 10 shows another example of a logical setup of each disk drive in the store 
section 40. A disk drive 41-1 to 41-16 by initial setting by the operator Four reserve disk drives 
(disk drive 41-13 to 41-16) are set up. A disk drive 41-1 to 41-10 among the remaining disk 
drives 41-1 to 41-12 It is logically divided into the disk drive group 90-5 to 90-9 which consists 
of a disk drive 41-1 to 41-3, 41-4 to 41-6, 41-7 to 41-8, 41-9, and 41-10, respectively. In this 
example, from the upper limit of the number of disk drives which can be mounted, it was 
mounted few and two all are set up about a mounted part as a disk drive which stores a reserve 
disk drive or data, and redundancy data. In the disk drive group 90-5 and 90-6, data and 
redundancy data are set as two disk drives and the redundancy disk drive group of RAIDS which 
consists of three disk drives which occupies one set in capacity, respectively. By the disk drive 
group 90-7, data and redundancy data are set as the redundancy disk drive group of RAID1 
which consists of two disk drives which occupies every one disk drive in capacity, respectively. 
The disk drive group 90-8 and 90-9 are set as the non-redundancy disk drive group of RAID0 
which constitutes the disk drive group which one set only of a disk drive became independent of, 
respectively. A disk drive 41-13 is set as 90 to disk drive group 5 dedication among reserve disk 
drives, the disk drive 41-14 is set as 90 to disk drive group 6 dedication, and the disk drive 41- 
15 and the disk drive 41-16 are set up as a common reserve disk drive. 
[0029] In a configuration like drawing 10 the disk drive group 90-5 and 90-6 Although it is 
possible in the viewpoint of allocation of a reserve disk drive to perform the backup process to 3 
times by max once [ at least ] and the backup process to 2 times is possible for the disk drive 
group 90-7 and 90-8, and 90-9 at the maximum on the other hand When another backup process 
has started in advance, it cannot carry out once. 

[0030] The logical condition in a certain time in a setup like drawmg^lj) is shown in dravying 1 1 . 
Table 2 of drawing 12 shows some contents on the reserve disk drive management information 
table 34 at this time. In Table 2, in 01 of a correspondence disk drive group serial number, 02 
corresponds to 90-6 and 04 corresponds to 90-8 at the disk drive group 90-5. 
[0031] In drawing 1 1 , it is shown that the failure which needs a backup process for the disk 
drive to which x mark is attached has occurred, and the arrow head is pointing to the backup 
place disk drive. Suppose that it is the disk drive with obstacles with which the disk drive 41-10 
was most judged to be the backup process need in recently among the disk drives to which x 
mark is attached. In order that one may not have an intact thing in a common reserve disk drive 
at this time, the backup process of a disk drive 41-10 is not performed. That is, in the flow chart 
of drawing 3 , it becomes the flow of NO and step 1007 "it is to processing at the time of backup 
process improper" to NO and step 1004 "the reserve disk drive of dedication is set as the disk 
drive group concerned" to step 1001 "backup process demand generating" and step 1002 "there 
is an intact thing among the reserve disk drives which are not dedication." 
[0032] Since the disk drive 41-10 belongs to the un-redundancy disk drive group 90-9, if the 
decision which needs a backup process aims at prophylactic backup, access to a disk drive 41- 
10 will be henceforth performed, while possibility that some data will lose has been in a high 
condition. Moreover, henceforth, if the disk drive 41-13 which is the last intact reserve disk is 
not in either of the disk drives about the disk drive 41-1 to 41-3 which constitutes the disk drive 
group 90-5 set up as an exclusive reserve disk drive, and either of 41-15 when the failure which 
needs a backup process occurs, a backup process will not be performed. Namely, if the backup 
process to 41-3 is completed normally If it becomes before 41-1, 41-2, and 41-15 constitute 
the disk drive group 90-5 and are completed normally on the other hand, since 41-1, 41-2, and 
41-3 constitute the disk drive group 90-5 In the former, the backup process using 41-13 is 
possible about 41-1, 41-2, and 41-15, and possible about 41-1, 41-2, and 41-3 in the latter. 
Thus, if the backup process to a disk drive 41-15 is completed about the disk drive 41-3, also 
when a failure occurs in a disk drive 41-15, the backup process about a disk drive 41-15 is 
possible. 

[0033] When the backup process about the disk drive group 90-5 operates In the flow chart of 
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drawing 3 Step 1001 "backup process demand generating", As opposed to step 1002 "there is 
an intact thing among the reserve disk drives which are not dedication" NO, As opposed to step 

1004 "the reserve disk drive of dedication is set as the disk drive group concerned" YES, It 
becomes the flow of YES, step 1006 "specify one for backup processes from the intact thing 
which is the reserve disk drive of dedication", and step 1008 "backup process initiation" to step 

1005 "there is an intact thing among the reserve disk drives of dedication." However, when 
extension of a reserve disk drive was performed by the customer engineer, or when processing 
which the exchange or repair of a failure disk which finished the backup process is performed, 
and reverse-copies the contents of the backup place disk drive is performed, the backup 
process of any disk drive group can become again possible. 

[0034] In the latter of the above two examples of a configuration, although what consists of only 
disk drives single as an example of an un-redundancy disk drive group was explained, RAID5 
without the non-redundancy group which consists of two or more disk drives, for example, parity 
data, etc. is sufficient as this. 

[0035] Thus, a backup process is preferentially performed to the disk drive group with which the 
reserve disk drive of beforehand dedication was set up when a backup process was equally 
performed to all the disk drive group while the intact reserve disk drive had allowances in the 
number as a whole according to the gestalt of this operation, and allowances had been lost in the 
number as a whole on the other hand. Namely, two or more reserve disk drives given while the 
intact reserve disk drive had allowances in the number as a whole can be used efficiently. On the 
other hand, when allowances have been lost in the number as a whole As opposed to the disk 
drive group which the operator judged beforehand that data with a high significance were stored 
relatively, and set the reserve disk drive as dedication The data integrity on the disk drive group 
is preferentially raised to backup disks using a reserve disk drive. The cost required in order to 
secure the dependability demanded by these is minimized. 

[0036] As mentioned above, although this invention was concretely explained based on the 
gestalt of operation, this invention is not limited to said example and can be variously changed in 
the range which does not deviate from the summary. 
[0037] 

[Effect of the Invention] In the equipment which according to the memory control unit of this 
invention starts a backup process automatically while continuing transfer of data with a central 
processing unit at the time of failure generating of a disk drive Making it possible to use a 
reserve disk drive preferentially by setting actuation of a user, a customer engineer, etc. to the 
disk drive with which data with a high significance were stored relatively The effectiveness of 
minimizing the cost required in order to secure required dependability by using the given reserve 
disk drive efficiently is acquired. 



[Translation done.] 
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